Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/3137392e34392e3138302e302f32322d3234203d3e20323731313937.roa
File:                     3137392e34392e3138302e302f32322d3234203d3e20323731313937.roa (raw, json)
Hash identifier:          qb9pT92HIoamTR+rtDYIKK6szpyYrG7qSF9DZRcd18U=
Subject key identifier:   F7:28:31:BB:92:FF:FF:A4:2A:9C:BB:0D:E5:B5:D8:99:7A:AE:99:20
Certificate issuer:       /CN=47D5426D04E43F41EEF7B6587AD43E46BD355912
Certificate serial:       60A42CA2A3DD9DBD213632FD7925E5032632CF28
Authority key identifier: 47:D5:42:6D:04:E4:3F:41:EE:F7:B6:58:7A:D4:3E:46:BD:35:59:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/3137392e34392e3138302e302f32322d3234203d3e20323731313937.roa
Signing time:             Thu 04 Apr 2024 06:54:05 +0000
ROA not before:           Thu 04 Apr 2024 06:49:05 +0000
ROA not after:            Thu 03 Apr 2025 06:54:05 +0000
asID:                     271197
IP address blocks:        179.49.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.crl
                          rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:2c:a2:a3:dd:9d:bd:21:36:32:fd:79:25:e5:03:26:32:cf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47D5426D04E43F41EEF7B6587AD43E46BD355912
        Validity
            Not Before: Apr  4 06:49:05 2024 GMT
            Not After : Apr  3 06:54:05 2025 GMT
        Subject: CN=F72831BB92FFFFA42A9CBB0DE5B5D8997AAE9920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:fb:45:bb:40:3d:74:c5:c7:5c:5f:e5:7e:
                    12:0f:cb:9b:1c:b2:94:c4:24:0b:ed:9f:df:23:57:
                    cb:5e:b1:ae:e6:35:c4:00:bd:03:aa:c4:df:31:81:
                    54:02:f8:77:8b:e7:55:12:fb:31:8a:01:f5:82:58:
                    12:d5:9c:88:da:f3:d6:9b:c2:06:4d:92:8a:9f:86:
                    a7:c7:aa:af:06:e2:d3:91:2a:b4:d4:52:61:80:d2:
                    72:ec:12:89:dc:59:ff:d5:90:00:6b:f9:1a:6a:a1:
                    58:fd:92:ee:38:07:21:71:13:c8:84:25:1f:ce:30:
                    46:12:30:55:96:87:57:37:62:04:c5:0b:2d:25:80:
                    66:d1:55:5a:ef:36:c0:be:18:8d:ca:6a:63:c2:2d:
                    eb:6b:1f:b5:d3:74:ba:02:75:48:ed:f0:6e:10:18:
                    b0:9b:50:a3:7f:a4:c0:e4:8a:6f:92:40:0d:5a:f5:
                    41:04:69:07:f2:70:86:70:16:84:9d:97:85:09:7e:
                    3b:86:86:ae:54:75:32:23:a0:fe:ff:fd:12:27:8e:
                    df:8e:e7:97:86:a7:7f:b6:73:10:10:db:ed:8a:4b:
                    39:cc:31:39:04:7e:77:d0:38:1b:ee:18:fc:cc:ca:
                    a9:79:4d:4d:5e:26:14:1e:66:08:ad:01:1a:97:21:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:31:BB:92:FF:FF:A4:2A:9C:BB:0D:E5:B5:D8:99:7A:AE:99:20
            X509v3 Authority Key Identifier:
                keyid:47:D5:42:6D:04:E4:3F:41:EE:F7:B6:58:7A:D4:3E:46:BD:35:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/3137392e34392e3138302e302f32322d3234203d3e20323731313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:2d:2c:ae:c1:d5:39:c8:82:f2:54:62:7a:08:5d:da:e6:
         a8:cc:b6:37:31:3b:85:4a:99:44:aa:7d:08:f6:30:e2:5c:c0:
         f2:a9:67:0d:18:51:58:c7:f5:b5:2e:6d:fc:49:f9:b2:83:15:
         4e:3a:92:65:21:21:b3:1e:35:23:c6:5d:78:6f:0f:c2:1c:d8:
         56:b8:17:cf:ee:47:c4:8e:96:50:b3:bd:c9:58:86:3e:0b:ec:
         de:74:b4:cc:33:12:c4:5d:f5:ab:e0:ce:73:22:21:93:c5:0a:
         8c:d8:58:2c:bf:e9:ac:81:2b:8b:bf:7a:d9:a8:b6:97:4f:08:
         62:62:62:71:f1:47:df:3e:55:f9:71:06:04:f3:fa:ef:9e:4a:
         51:08:64:92:38:67:04:2f:d1:2e:c5:9b:74:c1:51:e6:ab:a9:
         79:40:eb:0e:df:3c:97:80:76:c7:06:fa:56:a9:65:eb:0b:67:
         51:c5:96:eb:d0:2e:cf:43:0b:3c:e9:a0:25:99:8c:98:4f:82:
         7c:56:b7:6e:5f:86:b0:7e:a9:94:1c:a9:51:ca:85:c7:3a:ec:
         34:58:80:50:a4:41:89:5c:98:33:be:b8:42:d7:c3:0c:a1:68:
         94:c2:1c:d8:d9:20:86:59:21:39:6a:40:61:37:09:c5:1e:7f:
         ff:b1:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:42 2024 by rpki-client on console-ams.rpki-client.org